This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/6-MYWUgNN_QLhajw01TPQypu9qo.roa
File:                     6-MYWUgNN_QLhajw01TPQypu9qo.roa (raw, json)
Hash identifier:          u38LNGCNm7hapDrGswDbeJazlaHgAyILiY9j6QwpBsg=
Subject key identifier:   EB:E3:18:59:48:0D:37:F4:0B:85:A8:F0:D3:54:CF:43:2A:6E:F6:AA
Certificate issuer:       /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial:       019B7D5AC87A40D8A8681D0107255919D295
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/6-MYWUgNN_QLhajw01TPQypu9qo.roa
Signing time:             Fri 02 Jan 2026 06:17:40 +0000
ROA not before:           Fri 02 Jan 2026 06:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203576
IP address blocks:        185.179.24.0/24 maxlen: 24
                          185.179.25.0/24 maxlen: 24
                          185.179.26.0/24 maxlen: 24
                          185.179.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:c8:7a:40:d8:a8:68:1d:01:07:25:59:19:d2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
        Validity
            Not Before: Jan  2 06:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ebe31859480d37f40b85a8f0d354cf432a6ef6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:62:1c:84:81:e9:ca:23:6c:84:c4:a8:69:
                    56:83:2d:59:56:b9:24:96:d6:c5:dd:82:1d:99:3a:
                    5e:1d:c3:14:ed:57:20:64:8b:55:f5:4e:0a:0b:3f:
                    31:3a:9f:ce:56:e3:10:99:75:f5:f0:3f:1a:cf:31:
                    14:66:17:54:64:a0:db:50:88:a5:d7:4c:c3:3c:ce:
                    d2:b6:9c:b8:39:95:a2:c0:8f:a9:e6:63:6d:4b:d0:
                    7f:ef:88:6a:a2:bb:10:61:24:5c:b1:54:c4:fd:12:
                    a3:a8:0b:f1:f2:fc:64:72:5f:04:0b:c9:56:3b:f8:
                    75:cd:72:27:82:51:44:4e:e5:7a:36:d2:be:0f:0e:
                    ea:79:70:28:a4:f0:28:4e:77:43:77:ed:91:37:41:
                    d6:9c:18:0e:d9:1d:22:35:5a:8f:7f:d1:7e:60:87:
                    5d:95:60:36:fe:63:5b:4e:f9:d8:9c:99:74:75:97:
                    64:e0:ac:e9:13:e9:92:4b:b4:51:27:72:d2:3e:c8:
                    30:8c:ee:2b:6a:8d:82:3d:bc:9d:6f:06:51:50:12:
                    a9:5d:9b:d7:25:c9:54:0d:13:1c:45:b5:43:2f:9c:
                    07:de:c9:9a:1f:b9:53:88:3c:03:90:b0:4e:25:0c:
                    41:77:87:fa:7d:80:a3:04:c0:4d:59:b5:f1:be:90:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E3:18:59:48:0D:37:F4:0B:85:A8:F0:D3:54:CF:43:2A:6E:F6:AA
            X509v3 Authority Key Identifier:
                keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/6-MYWUgNN_QLhajw01TPQypu9qo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:74:6e:32:1b:16:e4:46:b2:2f:2c:c5:e8:59:13:0b:e0:e4:
         c9:12:7f:22:1e:e9:d4:16:4d:5a:d3:16:3e:83:9d:34:54:b1:
         80:1b:5d:fc:93:b0:ed:9e:59:d8:7d:a6:5c:82:e8:9b:37:3d:
         f3:d3:67:7b:34:05:eb:f8:e8:e1:61:10:09:98:1b:a1:9b:de:
         e6:4d:f6:94:69:18:1f:f5:a8:46:2d:c9:46:13:5c:8e:9b:cf:
         54:20:f6:38:1a:23:0b:a5:a0:40:99:23:e3:c7:b3:5e:bb:f2:
         7c:5d:fc:df:b7:5b:c6:af:a4:96:20:2c:49:87:7b:40:a3:ed:
         44:d4:da:6f:14:45:b8:b3:72:ab:da:11:d5:a4:17:29:c6:76:
         24:88:94:4e:c1:16:73:68:88:ec:7e:cd:02:d1:50:f1:f8:00:
         ac:77:13:16:4c:e0:ae:14:4e:2f:6b:c5:c2:c3:0a:9e:e3:86:
         6d:9f:c9:53:ad:e3:a5:bb:5d:18:9b:a9:3a:ed:b6:bf:72:63:
         ee:e3:d7:42:df:8e:87:f2:0a:90:f1:2c:0d:fa:21:c9:fa:a4:
         42:6f:61:8b:18:8a:84:1b:c9:27:8c:cc:a2:38:7d:2c:8f:be:
         58:87:cb:be:86:d1:8f:b6:49:e7:0d:5b:81:80:71:f0:96:ab:
         53:d9:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:12:47 2026 by rpki-client